7.1

CVE-2020-36652

Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files.

This issue affects Hitachi Automation Director: 

from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hitachi ≫ Automation Director Version >= 8.2.0-00 <= 10.6.1-00
   Linux ≫ Linux Kernel Version-
Hitachi ≫ Infrastructure Analytics Advisor Version >= 2.0.0-00 <= 4.0.0-00
   Linux ≫ Linux Kernel Version-
Hitachi ≫ Ops Center Analyzer Version < 10.9.1-00
   Linux ≫ Linux Kernel Version-
Hitachi ≫ Ops Center Automator Version < 10.9.1-00
   Linux ≫ Linux Kernel Version-
Hitachi ≫ Ops Center Viewpoint Version < 10.9.1-00
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
hirt@hitachi.co.jp 6.6 1.8 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.